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DIGITALEUROPE is committed to working with the Council and the European Parliament to deliver a new ePrivacy 
Regulation (ePR) that can truly protect Europeans’ right to privacy while not hampering innovation and beneficial 
data uses. European consumers and companies shouldn’t have to choose one or the other, and the right balance 
can be found if the new law provides for a risk-based approach and ensures full consistency with the letter and 
the spirit of the General Data Protection Regulation (GDPR) as well as the upcoming European Electronic 
Communications Code (EECC). 


We urge the co-legislators to: 


e Define a reasonable scope that complements existing rules, minimises overlaps and stays true to the 
objectives of data protection and telecoms law. For instance, anonymous data, which does not pose 
privacy risks and is therefore not covered by the GDPR, should not be regulated. Rules pertaining to 
ancillary communications, which are not functionally equivalent to telecoms services, or rules pertaining 
to M2M platforms, which for instance include industrial automation processes, should be explicitly 
excluded, thus not be covered by the ePR and should be left under the purview of the GDPR. 


e Ensure full consistency with the GDPR and the EECC, which would avoid parallel and conflicting definitions 
describing the same phenomena. Similarly, consent standards, as well as the relevance of additional legal 
bases, should be the same across the GDPR and the ePR. The ePR rules should also be consistent among 
each other and avoid internal overlaps and duplications for the rules applicable to content, metadata and 
terminal equipment. 


e More broadly, ensure that the ePR preserves the GDPR’s risk-based approach rather than establishing 
blanket prohibitions for all processing underpinning a broad range of communications services and 
terminal equipment. Given the central role of electronic communications in people’s lives and the many 
uses which communications can serve, the ePR should be technology neutral and ensure legal flexibility 
to allow for data processing that has little or no impact on the right to privacy and confidentiality such as 
improving quality of service, providing automatic updates, ensuring that devices are free from security 
vulnerabilities and many others. 


e Allow sufficient time for implementation as companies would need to apply software changes to comply 
under the ePR and this, requires minimum 18 and preferable 24 months to implement. 


For more details on ePR, you can read DIGITALEUROPE’s consolidated position and watch the following videos: 


1. ePRimpact on confidentiality of communications 
2. ePR impact on end users 
3. ePRimpact on M2M communications/loT 
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For more information please contact: 
Iva Tasheva, DIGITALEUROPE’s Policy Manager 
+32 2 609 53 10 or iva.tasheva@digitaleurope.org 


ABOUT DIGITALEUROPE 


DIGITALEUROPE represents the digital technology industry in Europe. Our members include some of the world's largest IT, 
telecoms and consumer electronics companies and national associations from every part of Europe. DIGITALEUROPE wants 
European businesses and citizens to benefit fully from digital technologies and for Europe to grow, attract and sustain the 
world's best digital technology companies. DIGITALEUROPE ensures industry participation in the development and 
implementation of EU policies. 


DIGITALEUROPE’s members include in total 25,000 ICT Companies in Europe represented by 60 corporate members and 37 
national trade associations from across Europe. Our website provides further information on our recent news and activities: 
http://www.digitaleurope.or 
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Corporate Members 


Adobe, Airbus, Amazon, AMD, Apple, Bose, Brother, Canon, Cisco, Dell, Dropbox, Epson, Ericsson, Fujitsu, Google, Hewlett 
Packard Enterprise, Hitachi, HP Inc., Huawei, IBM, Intel, JVC Kenwood Group, Konica Minolta, Kyocera, Lenovo, Lexmark, LG 
Electronics, Loewe, Microsoft, Mitsubishi Electric Europe, Motorola Solutions, 
MSD Europe Inc., NEC, Nokia, Nvidia Ltd., Océ, Oki, Oracle, Panasonic Europe, Philips, Pioneer, Qualcomm, Ricoh Europe PLC, 
Samsung, SAP, SAS, Schneider Electric, Sharp Electronics, Siemens, Sony, Swatch Group, Tata Consultancy Services, 
Technicolor, Texas Instruments, Toshiba, TP Vision, VMware, Western Digital, Xerox, Zebra Technologies. 


National Trade Associations 


Austria: |OO Germany: BITKOM, ZVEI Slovakia: ITAS 

Belarus: INFOPARK Greece: SEPE Slovenia: GZS 

Belgium: AGORIA Hungary: IVSZ Spain: AMETIC 

Bulgaria: BAIT Ireland: TECHNOLOGY IRELAND Sweden: Foreningen 

Cyprus: CITEA Italy: Anitec-Assinform Teknikforetagen i Sverige, 

Denmark: DI Digital, 1T-BRANCHEN Lithuania: INFOBALT IT&Telekomforetagen 

Estonia: ITL Netherlands: Nederland ICT, FIAR Switzerland: SWICO 

Finland: TIF Poland: KIGEIT, PIIT, ZIPSEE Turkey: Digital Turkey Platform, ECID 
France: AFNUM, Force Numérique, Portugal: AGEFE Ukraine: IT UKRAINE 

Tech in France Romania: ANIS, APDETIC United Kingdom: techUK 
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